Spring Boot oAuth sample

ClientAuthenticationProvider.java

@Component
public class ClientAuthenticationProvider implements AuthenticationProvider {

  static final List<GrantedAuthority> AUTHORITIES = new ArrayList<GrantedAuthority>();

  static {
    AUTHORITIES.add(new SimpleGrantedAuthority("ROLE_USER"));
  }

  @Override
  public Authentication authenticate(Authentication auth) throws AuthenticationException {
    // here to call client API for authentication
    return new UsernamePasswordAuthenticationToken(auth.getName(), auth.getCredentials(), AUTHORITIES);
  }

  @Override
  public boolean supports(Class<? extends Object> paramClass) {
    return true;
  }
}

MySpringBootRouter.java

@SpringBootApplication
@EnableAuthorizationServer
public class MySpringBootRouter extends WebSecurityConfigurerAdapter {

  @Autowired
  private ClientAuthenticationProvider clientAuthenticationProvider;

  public static void main(String[] args) {
    SpringApplication.run(MySpringBootRouter.class, args);
  }

  @Override
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    auth.authenticationProvider(clientAuthenticationProvider);
  }


  @Override
  protected void configure(HttpSecurity http) throws Exception {
    // @formatter:off
    http
    .authorizeRequests()
        .antMatchers("/login").permitAll()
        .and()
    .exceptionHandling()
        .accessDeniedPage("/login?authorization_error=true")
        .and()
    .csrf()
        .requireCsrfProtectionMatcher(new AntPathRequestMatcher("/oauth/authorize"))
        .disable()
    .logout()
        .logoutUrl("/logout")
        .logoutSuccessUrl("/login")
        .and()
    .formLogin()
        .loginProcessingUrl("/login")
        .failureUrl("/login?authentication_error=true");
    // @formatter:on
  }

}